[Council] XEP-0185 feedback

[Ian Paterson]

Hi,

Overall I'm +1 on XEP-0185.

Should there be spaces between the concatenated strings in the example 
in Section 4?

Why is SHA1 being used in Section 4 instead of HMAC-SHA256?

Perhaps I've not understood, but I don't find section 4.1 very 
convincing. Am I supposed to? I guess it doesn't matter, including the 
Originating Server can't hurt, and with security it's always better to 
be conservative.

- Ian